Application/Control Number: 10/710,61 1 Page 2 

Art Unit: 2431 

DETAILED ACTION 



Examiner's Amendment 

An examiner's amendment to the record appears below. Should the changes and/or 
additions be unacceptable to applicant, an amendment may be filed as provided by 37 CFR 
1.312. To ensure consideration of such an amendment, it MUST be submitted no later than the 
payment of the issue fee. 



Authorization for this Examiner's Amendment was given in a telephone interview with 
Jonathan Berschadsky (Reg. No. 46,551) on 17 March 2009. 



This application has been amended as follows: 

IN THE CLAIMS 

Cancel claim 8-14 and 20. 

Replace claim 1,5-7, 15-19 and 21 as follows. 



1. (Currently Amended) A method for securing a transaction utilizing a proximity integrated 
circuit (PIC) transaction device and a t e rm i na l merchant system comprising: 

determining a first term i na l merchant action analysis result, at the term i na l 
merchant system, based at least in part on one of an authentication of the PIC transaction 
device using Offline Data Authentication (ODA), a transaction process restriction, and a 
merchant risk management factor, the first t e rm i na l merchant action analysis result indicating at 
least one of approving the transaction offline, approving the transaction online, and denying the 
transaction; 
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requesting, by the merchant system, an application cryptogram from the PIC 
transaction device, the application cryptogram being one of a cryptogram for approving the 
transaction offline, a cryptogram for approving the transaction online, and a cryptogram for 
denying the transaction based on the first merchant action analysis result; 

determining a first [[PIC]] card action analysis result, at the PIC transaction 
device, the first [[PIC]] card action analysis result indicating at least one of approving the 
transaction offline, approving the transaction online, and denying the transaction; 

transmitting, by the PIC transaction device, the first card action analysis result to 
the merchant system, wherein the first card action analysis result includes the requested 
application cryptogram; 

requesting, by the merchant system, based on at least one of the first merchant 
action analysis result and the first card action analysis result, an authorization response from a 
PIC issuer system: and 

if the term i na l merchant system receives [[a]] the P I C i ssuer's response 
authorization response from the PIC issuer system dur i ng on li n e author i zat i on , determining a 
s e cond t e rm i na l ana l ys i s r e su l t , at the t e rm i nal merchant system, based at least in part on a 
predetermined rule and at least one of the first t e rmina l merchant action analysis result and the 
first [[PIC]] card action analysis result, th e s e cond t e rm i na l ana l ys i s r e su l t i nd i cat i ng at le ast on e 
of approv i ng whether to approve the transaction offline and deny i ng or deny the transaction 
offline. 



5. (Currently Amended) A method of claim 4, comprising authenticating a 
transact i on d e v i c e the PIC issuer system online. 
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6. (Currently Amended) A method of claim 5, comprising authorizing the 
transaction by requesting application data from the PIC transaction device . 

7. (Currently Amended) A method of claim 5, comprising receiving a response to 
a request for transact i on d e v i c e PIC issuer system authentication online, using the response to 
the request for authorization of the transact i on d e v i ce PIC issuer system as an input to [[the]] a 
second t e rm i na l merchant action analysis result. 

8. -14. (Canceled) 

15. (Currently Amended) A system for securing a transaction comprising: 
a proximity integrated circuit (PIC) transaction device, the PIC transaction device 
being operable to: 

determine a first [[PIC]] card action analysis result, the first [[PIC]] card 
action analysis result indicating at least one of approving the transaction offline, approving the 
transaction online, and denying the transaction; and 

transmit the first card action analysis result to a merchant system, wherein 
the first card action analysis result includes a requested application cryptogram; and 

the a term i na l merchant system in communication with the PIC transaction 
device, the t e rm i na l merchant system being operable to: 

determine a first t e rm i na l merchant action analysis result based at least in 
part on one of an authentication of the PIC transaction device using Offline Data Authentication 
(ODA), a transaction process restriction, and a merchant risk management factor, the first 
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t e rm i na l merchant action analysis result indicating at least one of approving the transaction 
offline, approving the transaction online, and denying the transaction; 

request the application cryptogram from the PIC transaction device, the 
application cryptogram being one of a cryptogram for approving the transaction offline, a 
cryptogram for approving the transaction online, and a cryptogram for denying the transaction 
based on the first merchant action analysis result: 

request, based on at least one of the first merchant action analysis result 
and the first card action analysis result, an authorization response from a PIC issuer system; 
and 

determine a s e cond termina l ana l ys i s r e su l t , if the t e rm i na l merchant 
system receives a P I C i ssu e r's r e spons e the authorization response from the PIC issuer system, 
dur i ng on li ne author i zat i on, based at l east i n part on a pr e determ i ned ru le and at le ast on e of th e 
f i rst t e rm i na l ana l ys i s r e su l t and the f i rst P I C ana l ys i s r e su l t, th e s e cond t e rm i na l ana l ys i s r e su l t 
i nd i cat i ng at l east one of approv i ng whether to approve the transaction offline and deny i ng or 
deny the transaction offline based at least in part on a predetermined rule and at least one of the 
first merchant action analysis result and the first card action analysis result . 

16. (Currently Amended) A system of claim 1 5, wherein [[said]] the PIC 
transaction device is operable to provide a plurality of application cryptograms app li cat i ons , a 
plurality of PIC issuer z predetermined transaction processing rules, a PIC issuer z defined dataset 
for use in performing a[[n]] PIC issuer z defined risk management analysis, and a plurality of 
transaction disposition cryptograms in response to a command dataset for use in communicating 
with [[said]] the PIC transaction device . 
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17. (Currently Amended) A system of claim 1 5, wherein sa i d t e rm i na l the 
merchant system is operable to generate a merchant transaction disposition in accordance with 
a merchant risk management analysis performed by a merchant risk management application. 

18. (Currently Amended) A system of claim 1 7, wherein sa i d t e rm i na l the 
merchant system is operable to authenticate the PIC transaction device in response to receipt of 
at least one of the requested application cryptogram, a P I C transact i on d e v i c e cryptogram 
app li cat i on, a PIC issuer z predetermined transaction processing rule, a PIC issuer z defined 
datasetfor use in performing a[[n]] PIC issuer z defined risk management analysis, [[and]] a 
transaction disposition cryptogram, and a merchant risk management analysis. 

19. (Currently Amended) A system of claim 18, wherein sa i d t e rm i na l the 
merchant system is operable to authorize the transaction in response to receipt of at least one of 
the requested application cryptogram, a P I C transact i on dov i co cryptogram app li cat i on, a PIC 
issuer z predetermined transaction processing rule, a PIC issuer z defined dataset for use in 
performing a[[n]] PIC issuer z defined risk management analysis, a[[n]] PIC issuer z provided 
authentication cryptogram, [[and]] a transaction disposition cryptogram, and a merchant risk 
management analysis. 

20. (Canceled) 

21 . (Currently Amended) A computer-readable storage medium having stored 
thereon sequences of instructions, the sequences of instructions including instructions which 
when executed by a computer system cause[[s]] the computer system to perform: 
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determining a first t e rm i na l merchant action analysis result, at a t e rm i na l 
merchant system, based at least in part on one of an authentication of a proximity integrated 
circuit (PIC) transaction device using Offline Data Authentication (ODA), a transaction process 
restriction, and a merchant risk management factor, the first term i na l merchant action analysis 
result indicating at least one of approving [[the]] a transaction offline, approving the transaction 
online, and denying the transaction; 

requesting, by the merchant system, an application cryptogram from the PIC 
transaction device, the application cryptogram being one of a cryptogram for approving the 
transaction offline, a cryptogram for approving the transaction online, and a cryptogram for 
denying the transaction based on the first merchant action analysis result: 

determining a first [[PIC]] card action analysis result, at the PIC transaction 
device, the first [[PIC]] card action analysis result indicating at least one of approving the 
transaction offline, approving the transaction online, and denying the transaction; 

transmitting, by the PIC transaction device, the first card action analysis result to 
the merchant system, wherein the first card action analysis result includes the requested 
application cryptogram; 

requesting, by the merchant system, based on at least one of the first merchant 
action analysis result and the first card action analysis result, an authorization response from a 
PIC issuer system; and 

if the t e rm i na l merchant system receives a P I C i ssu e r's r e spons e the 
authorization response from the PIC issuer system dur i ng on li n e author i zat i on , determining a 
s e cond t e rm i na l ana l ys i s r e su l t , at the t e rm i nal merchant system, based at least in part on a 
predetermined rule and at least one of the first t e rm i na l merchant action analysis result and the 
first [[PIC]] card action analysis result, tho second term i na l ana l ys i s resu l t i nd i cat i ng at l east one 
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of approv i ng whether to approve the transaction offline and d e ny i ng or deny the transaction 
offline. 



Allowable Subject Matter 

Claims 1 -7, 15-19 and 21 are allowed. 

The following is an examiner's statement of reasons for allowance: 
The above mentioned claims are allowable over prior arts because the CPA (Cited Prior Art) of 
record fails to teach or render obvious the claimed limitations in combination with the specific 
added limitations recited in claims 1,15 and 21 (& associated dependent claims). 

The present invention is directed to a method for securing a transaction utilizing a 
proximity integrated circuit (PIC) transaction device and a merchant system. No singular art 
disclosing, nor motivation to combine has been found of requesting, by the merchant system, an 
application cryptogram from the PIC transaction device, the application cryptogram being one of 
a cryptogram for approving the transaction offline, a cryptogram for approving the transaction 
online, and a cryptogram for denying the transaction based on the first merchant action analysis 
result, and transmitting, by the PIC transaction device, the first card action analysis result to the 
merchant system, wherein the first card action analysis result includes the requested application 
cryptogram; and if the merchant system receives the authorization response from the PIC issuer 
system, determining, at the merchant system, based at least in part on a predetermined rule 
and at least one of the first merchant action analysis result and the first card action analysis 
result, whether to approve the transaction offline or deny the transaction offline. 
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Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to LONGBIT CHAI whose telephone number is (571)272-3788. The 
examiner can normally be reached on Monday-Friday 9:00am-5:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R. Sheikh can be reached on 571-272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you 
would like assistance from a USPTO Customer Service Representative or access to the 
automated information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Longbit Chai/ 

Primary Patent Examiner 
Art Unit 2431 
03/18/2009 



